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Abstract. In this article we study the Tate-Shafarevich groups corresponding 
to 2-isogenies of the curve E^. : y 2 = x(x 2 — k 2 ) and construct infinitely many 
examples where these groups have odd 2-rank. Our main result is that among 
the curves E^, where k = pi = 1 mod 8 for primes p and Z, the curves with 
rank have density > ^ ■ 



1. Introduction 

The elliptic curves Ek : y 2 = x(x 2 — k 2 ) with k 6 Z have been studied extensively, 
mainly because of the connection with the ancient problem of congruent numbers 
(see Guy [[it)) or Koblitz Jl4]|). Many authors constructed families of non-congruent 
numbers by minimizing the Selmer groups attached to 2-isogenies of Ek (see Feng 
||, Iskra jl2]], T. Ono Serf [P3| . to name but the most recent contributors; 
actually results of this type go back to Genocchi JB[ in the last century) . Sharper 
results were obtained notably by J. Lagrange [jl6[ [l7]] (see also Wada |36) and 
Nemenzo p5|]), who found better bounds on the rank of Ek by taking the 2-part 
of the Tate-Shafarevich groups into account. In this article, we will refine the 
criteria obtained by Lagrange and show that curves Ek, where k — pi for primes 
p = I = 1 mod 8, very rarely have Tate-Shafarevich groups with trivial 2-part. 

Notation. We recall the relevant notation from jl^] (the standard reference for 
notions not explained here is Silverman pif ): elliptic curves E with a rational 
point T of order 2 as our curves Ek come attached with a 2-isogeny <f> : E — > E 
(depending on the choice of T if E has three rational points of order 2). For 
T = (0, 0) we find the isogenous curve 



E k :y 



2 




if k is odd, and 
if fc is even 



(the distinction is made in order to minimize the coefficients of the curve; we could 
just as well work with only y 2 = x(x 2 + 4fc 2 ) as both models are isomorphic). The 
dual isogeny Ek — > Ek will be denoted by tp. If k is fixed, we will suppress this 
index and write E and E for Ek and Ek- 
Consider the torsors 

TW(6i) : N 2 — b\M A + b 2 e i , b x b 2 = -k 2 and 



T^(h) : N 2 = b 1 M i + & 2 e 4 , 6i6 2 



4fc 2 if k is odd, 
fc 2 /4 if k is even. 



The main part of this article was written in 1999 while the author was at the MPI Bonn; he 
would like to thank everyone there for the hospitality and the stimulating environment, and the 
DFG for financial support during that time. 
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The Sclmer group S^(E/Q) is defined as the subgroup of Q x /Q x2 consisting 
of classes &i<Q x2 such that TW(&i) has a nontrivial (0,0,0)) rational point 
in every completion Q„ of Q; the subgroup of S^(E/Q) such that the torsors 
T^\b\) corresponding to 6iQ x2 have a rational point will be denoted by W(E/Q) 
(from now on, rational point will stand for non-trivial rational point; we may and do 
assume moreover that its coordinates are integral and primitive, that is, (M, e) = 1). 
Similarly we define S W (E/Q) and W(E/Q). Finally, the Tate-Shafarevich groups 
are defined via the exact sequences 

> W{E/Q) ► S&\E/Q) ► m{E/Q)[4>] ► 0, 

► W(E/Q) ► SM(E/Q) ► III(£/Q)[V>] ► 0. 

There exist various methods for constructing elements of order 2 in Tate-Sha- 
farevich groups: one can perform a second 2-descent (cf. Birch and Swinnerton- 
Dyer [§, Razar §§, Lagrange fTl 0, Wada || and Nemenzo ||), employ the 
Cassels pairing (see e.g. Aoki Boiling |3j, Cassels and McGuinness 
compare the Selmer groups SW(E/Q) and S<- 2 \E/Q) as Kramer |U| (essentially, 
the methods mentioned so far are all equivalent to the classical second 2-descent), 
or use the method usually attributed to Lind Q but actually going back (in a 
slightly different context) to Redei ^] and Dirichlet || (I learned this technique 
from Stroeker & Top |}5| and used it in |l8| and |20| ). In this paper, we continue 
to use this last method. 

Our main results are the solvability criteria in Table || below; this will imply the 
lower bounds for density of rank-0 curves among the E p i . 

2. Preliminaries 

In the calculations below we will have use quite a number of elementary results 
on quadratic reciprocity and genus theory. The following subsections recall what 
we will need. 

2.1. Some reciprocity laws. In the following, p and I will denote primes = 1 mod 
8, and tt and A will denote primary primes in Z[i] with norms p and I, respectively. 
A prime tt of norm p = 1 mod 8 is called primary if 7r is congruent to a square 
modulo 4. For tt e Z[i], U e Z[y/2] and IT e Z[V^2] we can always choose 
associates satisfying tt = 1 mod 2 + 2i, II = 1 mod 2\/2 and II* = 1 mod 2\/—2, 
and these elements are primary. 

We will need a few elementary results on quadratic residue symbols; as in |18| , 
we let {p/l)i denote the biquadratic residue symbol for primes I = 1 mod 4 such 
that (p/l) = 1, and we let [•/'] denote the quadratic residue symbol in Z[i]. We 
also note that, for primes I = XX = 1 mod 8, the relation (1 + i) 4 = —4 implies that 
[1 + i/X] = (—4/l)s (this is the rational octic residue symbol). Moreover, [tt/X] = 
(p/1)a(1/p)± for primes p = nW and I — XX such that (p/l) = 1 by Burde's rational 
reciprocity law. Finally, it is easy to check that {e^/p) = [l + i/ 71 "] = (~ 4/p) 8 , where 
e 2 = 1 + \/2 (see H). 

Now recall that primes p = 1 mod 8 are norms from Z[£g]> say p — Na for some 
a = 1 mod (2 + 2£), and in fact there exist primary elements 7r £ Z[i], II G r L\\[2\ 
and II* £ 7L\\J — 2] with norm p. For primes / = 1 mod 8, we define A, A and A* 
similarly. Unless explicitly stated otherwise, this notation is valid for the rest of 
this article. 
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The following result shows that solvability criteria involving the quadratic symbol 
[IT /A*] can be reduced to criteria involving only [11/ A] and rational quartic residue 
symbols: 

Proposition 1. Let p = I = 1 mod 8 be primes such that (p/l) = +1. Then 



LT 




rir- 




'7T~ 




X 




_A*_ 




X 


= (!).(;) 



where the first three symbols [■/•] denote the quadratic residue symbol in Z[v / 2], 
Z[a/— 2] and respectively. 

Proof. We know that there exists an element a € Z[£g] such that II* = aia^ 
(here ay = o~j(a), where o~j is the automorphism that sends £ g to in particular 
ct\ = a), tt = aict5 and II = a\aj (observe that such norms are necessarily totally 
positive). Defining (3 accordingly we have [11/ A] = (ai(X7/f3), where (•/') i s the 
quadratic residue symbol in Z[£ 8 ]. Similarly, we have [II* /A*] = (a^as/fS), hence 
[II/A][n*/A*] = (ct3ar/(3). But this last symbol equals [tt/A], and since (p/l) = +1 
this coincides with [7r/A]. This proves our claim by Burde's reciprocity law. □ 

We also note that [A/n] = [IT/A] and [A* /II*] = [IT /A*] by the quadratic 
reciprocity laws in Z[\/2] and 7L\\J— 2], respectively. Finally, if K/k is an extension 
of number fields, if [ • / • ] and ( • / • ) denote the quadratic residue symbols in K and 
k, respectively, and if a is an ideal in Ok with odd norm, then [a/ a] — (A^y^a/a) 
right from the definition of residue symbols. Similarly, for ideals 21 in Ok with 
relative norm a and elements a G k coprimc to a, we have [a/21] = (a/a). For more 
on rational reciprocity laws, see jl9[ Chap. 5]. 

2.2. The class groups of Q(V±2l). Let us begin by reviewing the basic results 
of Scholz as pertaining to the special case k — Q(\ /f 2l), where I = 1 mod 4 is 
prime. Let e, h and h + denote the fundamental unit, the class number and the 
class number in the strict sense of k. Moreover, define (1/2)4 = ( — 1 for primes 
I = 1 mod 8; then (— 4//) 8 = (2/^)4(^/2)4. The following proposition is the special 
case p — 2 of a more general result due to Scholz jSTJ : 

Proposition 2. With the notation as above, there are the following cases: 

• (2/1) = -1: then Ne = -1 and h = h+ = 2 mod 4; 

• (2/1) = +1: 

(1) if (2/1)4 = -(1/2)4, then Ne = +1, h = 2 mod 4, and h+ = 4 mod 8. 

(2) if (2/1)4 = (1/2)4 = -I, then Ne = -1 and h = h+ = 4 mod 8; 

(3) if (2/V)4 = (1/2)4 = +1, then A\h and 8 \ h+ . 

Note that e.g. by the class number formula for strictly ambiguous ideals C am = 
2 t ^ 1 /(Ep /NEk) in quadratic extensions K/F with t ramified primes and unit 
groups Ep and Ek, the prime ideal 2 above 2 in Q(^/2) is principal in the usual 
sense if and only if A^e = +1 for the fundamental unit e of ( 



Let a ~ 2 be short for "the ideal a is equivalent in the strict sense to the square 



of some ideal" , and define a ~ [II similarly. 

If d = g?ig?2 is a product of two prime discriminants, then classical genus theory 
tells us that, for some ideal o with norm a (the existence of o implies (d/a) = +1), 



we have a ~ 2 if and only if (d\/a) = (d 2 /a) = +1. 
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Lemma 3. Let p = I = 1 mod 8 be primes such that (p/l) = +1, and let p denote 
the prime ideal above p in k = Q(v / 2l). Then p ~ [4~] -4=> [A/II] = 1. 

Proof. If 4 | h + , then the corresponding quartic cyclic unramified extension if/fc is 
given by K = /c(\/A). A prime ideal p of degree 1 will split completely in K/k if 
and only if its ideal class is a fourth power in Cl + (fc); on the other hand, Kummer 
theory shows that it splits if and only if A is a quadratic residue modulo any prime 
ideal above p in Q(^/2), that is, if and only if [A/II] = 1. □ 

Lemma 4. Let k = Q(\^2l) and assume that ( — 4/Z)g = —1. Then the prime ideal 
2 above 2 in Ok is principal in the strict sense if and only if (2/1)^ = —1. 

Proof. First observe that our assumption implies by Proposition ^| that the funda- 
mental unit of k has positive norm, that 2 is principal in the wide sense, and that 
h+ = 4 mod 8. 

Assume that z is principal in the strict sense. Then X 2 — 2ly 2 — +2 is solvable, 
hence so is 2a; 2 — ly 2 = 1 (we have put X = 2x). Now clearly 2 j x, hence x 2 = 
1 mod 8 and 2x 2 = 2 mod 16; on the other hand, (2/y) = +1, hence y 2 = 1 mod 16. 
Together this implies that I = 1 mod 16, that is, ( — 1/Z)g = +1- Since (— 4//)g = —1 
by assumption, this is equivalent to (2/1)^ = —1. 

Now assume that 2 is not principal in the strict sense. Then X 2 — 2ly 2 = —2, 
and with X = 2x we get 2a; 2 - ly 2 = -1. Now (2/Z) 4 = (x/l) = (l/x'), where 
x = 2 J x 1 with x' odd, and {l/x 1 ) = +1 by reducing our equation modulo x' . Thus 
(2/0 4 = +!• □ 



3. The case k — 2p 

We will now investigate which torsors of i?2 P do not have rational points al- 
though they are everywhere locally solvable. These curves were already studied by 
Lagrange |0 using second 2-descents and by Kings using the Cassels pairing 
on UI(E/Q). The curves i?2p are the simplest examples where TtI(E/Q)[4>] and 
IH(E/Q)[ip] may have odd dimension: 

Theorem 5. Let p = 1 mod 8 be a prime and consider the elliptic curve E : y 2 = 
x(x 2 — 4p 2 ). Then the Selmer groups are given by 

SW0/Q) = (-l,2,p), S&\E/Q) = ( P ), 

and if p = 9 mod 16, then we have UI(E /Q)[ip] = (p) and III(E /Q)[(j)} = (p). 
Here (x, . . . , z) denotes the subgroup of Q x /Q x2 generated by x, . . . , z. Moreover, 
m(E/Q) [2] ~ TII(E/Q) [2] ~ (Z/2Z) 2 . 

Proof. We leave the proofs that TtI(E/Q)[ijj] and III(E/Q)[<p} both have order 2 
as an exercise to the reader (they are much simpler than the proofs in the sections 
below). The claims IH(.E/Q)[2] ~ 1II(E/Q)[2} ~ (Z/2Z) 2 follow from the exact 
sequences (see diagram (3.9) in Razar p. 139]; Feng [Q, ^ erroneously claims 
that C = C = 0) 

— III(E/QM -> m(E/®)[2] — > UI(E/Q)[cf,} C — » 

—> TI1(E/QM — > UI(E/Q)[2] — . m(E/QM — » 6 — » 
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where C and C are finite groups of square order by results of Cassels [?]. Since 
they are quotients of groups of order 2, it follows that C = C = 0, and this implies 
our claim. □ 



4. The case k = pi = 1 mod 8 

The simplest cases are those where p = I = 3, 5, 7 mod 8; they were already 
discussed by Lagrange M : 



p mod 8 


I mod 8 


(p/l) 




S^(E/Q) 


1 


1 


+1 


(-hP,l} 


(2,P,0 






-1 


(-1,P*> 


(2, pi) 


5 


5 


+1 


(~l,pl) 


(P,i> 






-1 


(~l,pl) 


(2p,2Z) 


3 


3 




(~l,pl) 


1 


7 


7 




(-i,p,0 


(2) 



He also found necessary criteria for the solvability of certain torsors. Here are 
the results, reformulated using our notation: 



Proposition 6. Let p and I be distinct primes such that p = I = 3, 5, 7 mod 8. // 
the torsors in the table below have a rational point, then the conditions in the last 
column must be satisfied: 



p mod 8 


I mod 8 


(p/0 


torsors 


conditions 


5 


5 


+1 


rW(p),rW(i),rM(pi) 


(p/I) 4 = (1/P)i 


5 


5 


-1 


T^(2p),TW(2l),T^(pl) 


[(1 + *)tt/A] =+1 


7 


7 


+1 


TM(2),TW( p ),T(*)(I) 


[A/H] = +1 



In the last row, A 6 Z[V2] is a primary element with norm -I, and n e Z[\/2] 
ftas norm ±p. Observe that [A/TI] is well defined since [A/n][A/n] = [— Z/II] = 

H/p) = (p/0 = -i. 



The proofs for p = I = 5 mod 8 are straight forward and left as an exercise to 
the reader. Here we give some details for the case p = I = 7 mod 8: Consider the 
torsor T(p) : pn 2 — M A — Pe 4 . Reduction modulo I shows immediately that either 
1) I \ M and (p/l) = +1, or 2) I \ M and (p/l) = -1. Moreover, either A) 2 j Me 
and 2 | n, or B) 2 \ ne and 2 | Af. As in the case p = I = 1 mod 8, we get four 
equations per case: 



case 


I 


II 


III 


IV 


1A) 


M 2 + 


le 2 


= 2pa 2 


M 2 — 


le 2 = 2b 2 


pa 2 - 


f b 2 


= M 2 


pa 2 


-b 2 = 


--le 2 


IB) 


M 2 ^ 


-le 2 


= pa 


M 2 - 


- le 2 = b 2 


pa 2 4 


-b 2 -- 


= 2M 2 


2 

pa 


-b 2 = 


2le 2 


2A) 


lm 2 - 


f e 2 


= 2a 2 


lm 2 — 


e 2 = 2pb 2 


a 2 - 


-pb 2 


= e 2 


a 2 - 


-pb 2 = 


lm 2 


2B) 


lm 2 


+ e 2 


= a 2 


lm 2 - 


e 2 = pb 2 


a 2 - 


pb 2 


= 2e 2 


a 2 ~ 


pb 2 = 


2lm 2 



Now we distinguish these four cases: 
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(M + by/2)e 



IA) Writing II) and III) in the form M 2 - 2b 2 = le 2 and M 2 - b 2 = pa 2 
we find that [X/IL] = [M + by/2/H\, where A e Z[a/2] is the element of 
norm I that divides M + by/2. We would like to use the congruence b = 
+M mod p coming from second equation and conclude that [A/IT] = [1 ± 
y/2/H], but unfortunately the last symbol depends on the choice of the sign. 
We therefore have to work a little harder. 

First observe that, for M > 0, we have (M/p) = (—p/M) = +1 from the 
second equation. Now we factor pa 2 = (M — b) (M + b) and consider the 
following two cases: 

a) M — b = 2pr 2 , M + b = 2s 2 (the negative signs cannot hold here: 
otherwise we would get M = —s 2 — rp 2 contradicting our assumption 
that M > 0); then b = s 2 -pr 2 = 1 mod 4, and we get [M + by/2/Tl] = 
(M/p)[l + V2/U} = [l + V2/U}. 

b) M — b = 2r 2 , M + b = 2ps 2 ; then b = ps 2 — r 2 = 3 mod 4, and now 
[M + by/2/n} = [1 - \/2/n}. 

Thus [Ae/II] = +1, where e = 1 + (— l/b)\/2. Now it is easy to check 
that Ae is primary: in fact, r + s\/2 with 2 | s is primary if and only if 
r + s = 1 mod 4, and since Ae is primary if and only if (M + by2)e is, we 
find 

(M + b)V2 if b = 1 mod 4, 
(b - M)\/2 if b = 3 mod 4, 

and 2M + 36= 2 — 6= 1 mod 4 in the first and —6=1 mod 4 in the second 
case. Thus in this case [A/II] = +1, where A = Ae is primary with norm 
-I. 

IB) Here 6 2 - 2Af 2 = -pa 2 and 6 2 - M 2 = -le 2 . Again, choosing M > 
guarantees [M/l) = (-1/M) = +1. Next, M - 6 = r 2 and M + b = Is 2 
imply 26 = Is 2 — r 2 and 6=1 mod 4, while A/ — 6 = lr 2 and M + b — s 2 give 
26 = s 2 - lr 2 and 6 = 3 mod 4. Thus we get [6 + My/2/ A] = [-1 + V2/A] 
if 6 = 1 mod 4 and [6 + My/2/ A] = [1 + %/2/A] if 6 = 3 mod 4. Putting 
e = —(—1/6) + y/2, it is easy to check that (6 + My/2)e is totally positive. 
Now Hasse |llj] has shown that we have the reciprocity law [ot/0\ = [(3 /a] in 
an arbitrary algebraic number field if the conductors of a and (3 are coprime. 
Since (6 + M %/2 )e > 0, the gcd of the conductors of (b + My/2 )e and A do 
not contain infinite primes, and since A is primary, the gcd does not contain 
primes above 2. But then (b+My/2, A) = (1) gurantees that the conductors 
are indeed coprime, and the reciprocity law gives 1 = [(6 + M V2)e/A] = 
[A/6 + My/2}. Since (6 + My/2) = (Ua 2 ) by unique factorization, we 
conclude that [A/b + My/2] = [A/II]. 

2A) Equations I and III correspond to III and II in case IB) with the roles of p 

and / switched. 
2B) Again, this reduces to case 1A). 
We have proved: 




Proposition 7. Let di denote the density of rank curves among the E p i, where 
p = I = i mod 8 are primes. Then we have d^ = 1, cfe > 5 and d*? > \. 

The main result of this note is that we also have d\ > \ (this is much stronger 
than the result obtained by Lagrange Q). Although numerical computations seem 
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to suggest that dk — 1, it seems that the bounds derived in this article cannot be 
improved using our methods. 

From now on, we will assume that p and q are both primes = 1 mod 8. 

4.1. The case (p/l) = — 1. Let k — pi be a product of primes p = I = 1 mod 8 
with (p/l) = -1. Then (see 0) 

&+\E/Q) = (-l.pl) = W(E/Q), S^(E/Q) = (2,pl). 

In particular, UI(E/Q)[ip] = 0, so we only have to discuss the </>-part of 1II(E/Q). 

Proposition 8. If k — pi is a product of primes p = I = 1 mod 8 with (p/l) = — 1. 
£/zen III (i?/(Q> )[</>] = (2, pZ) whenever (— 4/p)g(— 4/Z)g = — 1. If this condition holds, 
we have #IH(.E/Q)[2] = 4. 

Proof. Consider fW(2) : iV 2 = 2Af 4 + 2p 2 Z 2 e 4 . 

• Assume first that (M,pZ) = 1; then N = 2n gives 2n 2 = M 4 + p 2 Z 2 e 4 . 
Now M 2 +ple 2 i = l + i mod 8 and unique factorization in Z[i] shows that 
M 2 + ple 2 i = (1 + i)v 2 . Write p — tttt for primes 7T,7f = 1 mod 2 + 2i; 
reducing modulo 7r gives [1 + i/tt] = +1, that is, (— 4/p) 8 = +1, and 
similarly (— 4//) 8 = +1. 

• If (M,pl) — p, put M — mp and N — 2pn; then we get 2n 2 = (pm 2 + 
le 2 i)(pm 2 + Ze 2 i), and again pm 2 + le 2 i = (1 + i)v 2 . Reducing modulo tx 
gives [1 + i/tt] = [Z/tt] = (Z/p) = -1, hence (-4/p) 8 = (-4//) 8 = -1. 

• The cases (M,pl) = I and (M,pl) = pi are treated similarly. 

Next take T^(pZ) : iV 2 =pZM 4 + 4pZe 4 . With N = pin this gives pin 2 = M 4 + 4e 4 ; 
since we may switch the roles of M and e we may assume that M is odd and e is 
even. Reducing modulo p and I shows that (— 4/pZ) 8 = (Me/p). Write e = 2 J e' 
with e' odd: then (e/p) = (e'/p) = (p/e') = 1 and (M/p) = (p/M) = 1. Thus 
(-4/pOs = 1. 

Finally look at T^(2pl) : 2pln 2 = Af 4 + e 4 . As above, M 2 + ie 2 = (1 + i)7rAr/ 2 ; 
adding this equation to its conjugate gives 2M 2 = (1 + i)i:\v 2 + (1 — ^nXU 2 . 
Reducing modulo W gives 1 = (2/p) = [1 + i/if]{ir/ir}{\/Tf]. Now [tt/W] — 1 and 
[\/n] = [X/tt], hence (— 4/p) 8 = [n/X]. Similarly, (— 4/Z) 8 = [n/X], and the claim 
follows. Note that [n/X] depends on the choice of ir and A. □ 

From Prop. || we get by a standard application of Chebotarev's density theorem 
the following 

Corollary 9. The curves of rank among E p i, where p = Z = 1 mod 8 are primes 
such that (p/l) = —1, have density at least h. 

4.2. The case (p/l) = +1. Let k = pi be a product of primes p = I = 1 mod 8 
with (p/l) = +1. Then (see @) 

Srfc»(£/Q) = (-l,p,Z), S^(E/Q) = (2,p,Z). 

Moreover (— l,pZ) C VF(_E/Q). As above, we will now compute nontrivial elements 
crfm(J5/Q)[0] and in^/Q)^]. 
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The ?/>-part 

First we observe that W(E/Q) always contains (—l,pl). Thus 

cither W(E/Q) = (-l,p, I) and m(E/Q)[tp] = 0, 
or W(E/Q) = (-l,pl) and IH(£/Q)[V>] = (p), 

where (p) represents the class of pQ x2 (which is the same as the class of lQ x2 in 
view of plQ x2 e W(E/Q)) in HI(E /Q)[ip]. 

It is therefore sufficient to consider the torsor T^\p) : N 2 — pM 4 —pl 2 e 4 . Here 
the right hand side factors over Q as TV 2 = p(M 2 — le 2 )(M 2 + le 2 ). We have the 
following possibilities concerning divisibility 

1) 2\e,2\ MN l \A)l\MN \a)p\{M 2 + le 2 ) 

2) 2 | N, 2 f Me, Y ' \B) I \ M,l \ N, ^ Y P ' j&) p | (A/ 2 - le 2 ). 

Thus we have to consider eight different cases. We claim 

Proposition 10. Let E be the elliptic curve defined by y 2 = x(x 2 — k 2 ), where 
k = pi and where p = I = 1 mod 8 are primes such that (p/l) — 1. If the torsor 

(1) T^\p):N 2 =pM A -pl 2 e A , 

has a rational solution, then the conditions in Table |I| hold according to the case we 
are in. 



case 


conditions(*) 


lAa) 


[n/A] 


= (Z/p)4 = (-4/p) 8 


= 1 




lAb) 


[n/A] 


= (p/z) 4 - (i/pH- 


4/p) 8 = 1 




IBa) 


[n/A] 


- (-4/pOs, (f/p) 4 = 


= ip/iU- 


4/p)s = 1 


lBb) 


[n/A] 


= (-4/1)8, (P/04 = 


(-4/p) 8 = 


= 1 


2Aa) 


[n/A] 


= (-4/p) 8 , (//p)4 = 


(-4/Os = 


= 1 


2Ab) 


[n/A] 


= (i/P)4 = (p/0*(- 


4/0s = 1 




2Ba) 


[n/A] 


= (-4/pOs, (p/04 = 


= (i/pH- 


4/0s = 1 


2Bb) 


[n/A] 


= (p/04 = (-4/1)8 


= l 





Table 1. If T^\p) has a rational point, then the conditions (*) hold. 



If we are in case 1A), then putting N = pn in ([[]) gives pn 2 = M 4 — l 2 e 4 = (M 2 — 
le 2 )(M 2 +le 2 ). In case lAa), these two factors are coprime, hence M 2 + le 2 = pa 2 
(I) and M 2 — le 2 = b 2 (II), where ab = n. By adding and subtracting (I) and (II) 
we get 2M 2 = b 2 + pa 2 (III) and 2le 2 = pa 2 — b 2 (IV). In a similar way we find the 
following table displaying the four equations (I)-(IV) whose solvability follow from 
the existence of a rational point on (pi): 
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case 


I 


II 


III 


IV 


lAa) 
lAb) 


, r o 7 9 9 

M + le 2 = pa 2 
M 2 + le 2 = a 2 


71 rO 1 9 T 9 

M - le 2 = b 2 
M 2 - le 2 = pb 2 


71 r 9 I 9 9 

2M 2 = b 2 + pa 2 
2M 2 = a 2 + pb 2 


^ i 9 9 t 9 

2le 2 = pa 2 - b 2 
2le 2 = a 2 - pb 2 


IBa) 
IBb) 


Ira 2 + e 2 = pa 2 
lm 2 + e 2 = a 2 


lm 2 — e 2 = b 2 
lm 2 — e 2 — pb 2 


2lm 2 = b 2 + pa 2 
2lm 2 = a 2 +pb 2 


2e 2 = pa 2 - b 2 
2e 2 = a 2 - pb 2 


2Aa) 
2Ab) 


M 2 + le 2 = 2pa 2 
M 2 + le 2 = 2a 2 


M 2 - le 2 = 2b 2 
M 2 - le 2 = 2pb 2 


M 2 = b 2 + pa 2 
M 2 = a 2 + pb 2 


le 2 — pa 2 — b 2 
le 2 = a 2 -pb 2 


2Ba) 
2Bb) 


lm 2 + e 2 = 2pa 2 
lm 2 + e 2 = 2a 2 


lm 2 -e 2 = 2b 2 
lm 2 - e 2 = 2pb 2 


lm 2 = b 2 + pa 2 
lm 2 = a 2 + pb 2 


e 2 = pa 2 - b 2 
e 2 — a 2 — pb 2 



In order to save some work we prove a general result that may be applied to 
each of these cases: 



Proposition 11. Let A, B 7 C, D £ N be pairwise coprime integers, each a product 
of primes = 1 mod 4, and assume that these primes are quadratic residues of each 
other. If there are x, y, v, w S N such that 

(2) Ax 2 + By 2 = Cv 2 , 

(3) Ax 2 - By 2 = Dw 2 , 

then C = D mod 8, and A, B, C and D satisfy the relations 

... (AB\ (AD\ (BD\ 

(4) I" U-Whi-A ) 4 = 1 

and 

, ,c-d / 2 \ (BC\ {BD\ (CD\ 

Proof. Assume that we have a congruence Ar 2 — Bs 2 mod D with (r, D) — (s, D) 
1 . and assume moreover that (AB/p) = +1 for all p | D. Then for each such p we 
have Ar 2 = Bs 2 mod p, and raising this congruence to the ^ — th power we find 
that (A/p)4,(r/p) = {B/p)^{s/p)\ multiplying these relations together shows that 
{AB/D)i = (rs/D). We will use this type of reasoning without comment below. 

We may (and will) assume that (x,y) — 1. From 2y 2 = 2By 2 = Cv 2 — Dw 2 = 
v 2 — w 2 mod 4 we then deduce that 2 | y and 2 \ xvw. 

Reducing ^ modulo C gives (— AB/C)a = (xy/C). Writing y = 2^y' for some 
odd y' gives (y/C) = {2/C) j {y'/C) = {2/C) j {C/y'). Reducing §) modulo y' 
we see (C/y') = (A/y'). Similarly we get (x/C) = (C/x) = (B/x) = (x/B) 
from (|), and (x/B) = (AD/B) 4 (w/B). Since (w/B) = (B/w) = (A/w) = 
(w/A) = (-BD/A)i(y/A) = (-BD/A) 4 (2/Ay (A/y 1 ), collecting our results gives 
(-AB/C)i = (AD/B) i (-BD/A) i (2/ACy. Next, (-1/A) 4 = (2/A) and (-1/C) = 
(2/C), hence the relations becomes (AB /C)±(AD/ B) 4 (BD/A) i = (2/AC) j+1 . 

Now there are two cases: if j = 1, then A = C + 4 mod 8, hence (2/ AC) = — 1, 
but (2/AC) j+1 = 1; if j > 2, then A = C mod 8, hence (2/ AC) = 1. In both cases, 
we arrive at the desired relation. 
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By adding and subtracting (||) and (||), we get 

(6) 2 Ax 2 = Cv 2 + Dw 2 , 

(7) 2By 2 = Cv 2 - Dw 2 . 

From (^) and the fact that y is even we deduce that C = D mod 8. 

Reducing (0) modulo D yields (2BC/D) 4: = (vy/D). From (0) we deduce that 
(y/D) = (2/Dy(y'/D) = (2/Dy(D/y>) = (2/Dy(C/y') and (v/D) = (D/v) = 
(2A/v), so (2BC/D) 4 = {2A/v)(2/ D)i {C /y'). Similarly, (-2BD/C) 4 = (wy/C), 
(y/C) = (2/C) j (C/y') and (w/C) = (C/w) = (2A/w). Combining these results 
yields {2BC/D) 4: (-2BD/C) i = (2A/vw)(2/CD) j . Since C = D mod 8, we have 
(2/CD) = 1, and using (-1/C) 4 = (2/C) we conclude that 

/2BC\ /2BD\ _/24\/2\ 

V D J 4\ C /4 ~ W; VC/ 
Next, (A/w) = (iu/A) = (-BD/A) A (y/A) and (A/w) = = {BC/A^y/A), 

thus (A/uio) = {-BD/A) 4 {BC/A)i = (2/A){CD/A) 4 since (fl/A) = +1. This 
gives us 

VCD/4 V D /4\ C JA A )a \vwJ\cJ 
If j = 1, then Cv 2 = Dw 2 + 8 mod 16, hence C = D + 8 mod 16 if and only if 
(2/u) = (2/w), or (2/uto) = -(-l)^ 15 )/ 8 . Moreover, 2Ax 2 ee 2C*w 2 + 8 mod 16 
implies {2/ AC) = -1, so we get (2/ vw){2/ AC) = (-1) (C ~- D )/ 8 . 

If j > 2, then Cu 2 = Dw 2 mod 16, and this shows that C = D mod 16 if and 
only if (2/v) = (2/u>), hence (2/uw) = {-iy c ~ D) / 8 . Moreover, (|) implies that 
A ee C mod 8, hence {2/ AC) = +1, and again (2/uw)(2/AC) = (-l)^"- '/ 8 . □ 

In order to apply this result we have to identify the coefficients A, B, C and D. 
We find 



case 


(1) 


(2) 


A 


B 


C 


D 


case 


(1) 


(2) 


A 


B 


C 


D 


lAa) 


I 


II 


1 


I 


P 


1 


2Aa) 


III 


IV 


P 


1 


1 


I 


lAb) 


I 


II 


1 


I 


1 


P 


2A6) 


III 


IV 


1 


P 


1 


I 


IBa) 


I 


II 


I 


1 


P 


1 


2Ba) 


III 


IV 


P 


1 


/ 


1 


IBb) 


I 


II 


I 


1 


1 


P 


2Bb) 


III 


IV 


1 


P 


/ 


1 



This takes care of all the conditions not involving [11/ A]. For completing the 
proof we need the following 

Lemma 12. Let P ee L ee 1 mod 8 be primes such that (P/L) = +1. Let II, A € 
Z[v2] 6e primary elements of norm P and L, respectively. Lf there exist integers 
x,y, z,w £ N such that 

x 2 — 2y 2 = —Pz 2 , and x 2 — y 2 = eLw 2 

for some e = ±1, then [11/ A] = +1. 

Proof. Unique factorization gives x + y^/2 — e2^la 2 7 where £2 is a fundamental unit 
of Z [a/2] and where fa = z. Thus [11/ A] = [e 2 /A][x + yy/2A]. Now y ee ±x mod A 
from the second equation, hence [x + yV2/A\ = [x/A][l + \/2/A]. But [1 + V2/A] = 
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[£2 /A] since the expression [±1 ± \/2/A] does not depend on the choice of signs, 
and we get [n/A] = [x/A] = (x/L). If e = +1, then (x/L) = (y/L) = (L/y) = +1, 
and if e = — 1, then (x/L) = (L/x) — +1. This proves our claim. □ 

Lemma [12 takes care of four out of our eight cases: 



case 


X 


y 


z 


w 


P 


L 


e 


lAa) 


b 


M 


a 


e 


P 


I 


-1 


lAb) 


a 


M 


b 


e 


P 


I 


+ 1 


2Ab) 


M 


a 


e 


b 


I 


P 


+ 1 


2Bb) 


e 


a 


m 


b 


I 


P 


-1 



For the remaining four cases, the role of Lemma [lj is taken over by 

Lemma 13. Let P = L = 1 mod 8 be primes such that (P/L) = +1. Let II, A S 
Z[v2] 6e primary elements of norm P and L, respectively. If there exist integers 
x, y, z, w S N such that 

j 2 1 2 r 2 
ana x + ey = Lw 



for some e 



x 

±1, then 



2ey z = Pz\ 




ife=-l, 

?) 4 (f) 4 (^) 8 tf« = +i- 

Proof. Let tt, A £ Z[y2e] be primary elements of norm P and L, respectively. Then 
from 7ra 2 = a; + y\/2e we get [7r/A] = [x + y-\/2e/A]. The second equation gives 
cc = ±yV^ m0( i ^ where I denotes a prime ideal above I in Q(Cs)- Letting { • / ■ } 
denote the quadratic residue symbol in Z[£ 8 ], we find [x+yV2e/X] = {x+yV2e/l} = 
{x±xV2/(\ = {x/L)[l±V2/A}. Now if e = 1 then (x/L) = (L/x) = +1, whereas 
if e = -1 then (x/L) = (y/L) = (y'/L) = (L/y') = +1. Thus [tt/A] = [1 + ^2/ A] = 
(-4/L) 8 . If e = -1, then 7r = II and A = A, but if e = +1 then n = II* and 
A = A*, IT, A* e Z[\/—2 } are primary elements of norm p and i, respectively. Thus 
[n/A] = [nVA*](P/L) 4 (i/P) 4 = (P/i)4(i/^)4(-4/L) 8 . □ 

Lemma O covers the remaining four cases: 



case 


X 


y 


z 


w 


P 


L 


e 


resulting condition 


IBa) 


b 


e 


a 


m 


P 


I 


+ 1 


[n/A] = (-4/pOs 


lBb) 


a 


e 


m 


b 


P 


I 


-1 


[n/A] = (-4/1)8 


2Aa) 


M 


b 


a 


e 


I 


P 


-1 


[n/A] = (-4/p) 8 


2Ba) 


e 


b 


m 


a 


I 


P 


+ 1 


[n/A] = (-4/ P i) 8 



Note that, in case IBa), Lemm a |l3| gives [n/A] = (—A/l)%{p/l)±(l/p)±; but since 
(p/l)i(l/p)i = (—A/p)s by Lemma we get the relation in the table above. 

As a matter of fact, the criteria involving [n/A] can just as well be obtained 
using genus theory (compare the discussion of T^(2p) below). As the discussion 



12 



FRANZ LEMMERMEYER 



of the </>-part below shows, however, it seems that arguments from genus theory 
cannot always be replaced by the direct calculation of residue symbols. 



The 0-part 
Our aim in this section is to show 

Proposition 14. If the torsor T^> (&i) with 1 ^ b\ £ (2,p,l) has a rational point, 
then the conditions in Table @ must be satisfied. 



bi 


conditions (*) 


2 


(-4/p) 8 = (-4/1)8 = P/A] = 1 




P 


(p/04 = (i/pU = (-4/p) 8 = i 




2p 


(p/iMi/p)4 = (-4/0s, (-4/p) 8 = i, [n/A] 


= (i/p)4 


I 


(p/0 4 - (Z/p) 4 = (-4/0s = 1 




21 


{p/Ml/p)i = (-4/p) 8 , (-4/1)8 = 1, P/A] 


= (P/04 


pi 


(p/04 = G/P) 4 , (-4/p) 8 = (-4/Oa = 1 




2pl 


ip/lHl/ph = (-4/p) 8 = (-4/Os, P/A] = 


1 



Table 2. If T^(bi) has a rational point, then the conditions (*) 
must be satisfied. 



For the proof of Prop. [14], we need the following proposition dealing with a 
slightly more general situation: 

Proposition 15. Let k be a product of pairwise distinct primes = 1 mod 8 that are 
quadratic residues of each other. Let k = AB for A, B £ N; if the torsor (A) 
of Eh has a nontrivial rational point, then the following conditions hold for any 
primary a £ Z[i] with norm A: 

(1) (-4M) 8 = +1; 

(2) [qj/tt] = +1 for all ir | B: 

(3) (— 4/p) 8 = (B/pjj, for dip | A. 

(4) [a*/7r] = +1 for all 7r | a, where a = a*ir. 

Proof. We have T^(A) : AN 2 = M 4 + 4B 2 e 4 ; let b = gcd(M, B) be normalized by 
b > 0. Putting N = bn and M — bm, we get An 2 = b 2 m 4 + 4c 2 e 4 , where be = B. 
We may assume that m is odd: otherwise we switch the roles of m and e. Note 
that A = l mod 8 implies that 4 | e. 

Factoring the right hand side on 1[i] gives av 2 = bm 2 + 2cie 2 for some primary 
a £ Z[i] with norm Na — A. First observe that we have av 2 = bm 2 = 1 mod 8: 
thus a is congruent to a square modulo 8, and this implies 1. Moreover, [a/n] = 
[b/n] = (b/p) = +1 for all tt \ c with Nn — p, and similarly [a/w] = 1 for n \ b, 
hence criterion 2. 

Reducing the equation modulo some tt | a gives [l + i/7r](c/p)4 = (— b/p)^ hence 
(— 4/p) 8 = (B/p)i for all p | A, and this is 3. 
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Finally, subtracting av 2 = bm 2 + 2cie 2 from its conjugate yields av 2 — av 2 = 
4cie 2 ; reducing modulo some W \ a we get [a/w] = (2c/p) = +1. Since [7r/7f] = +1. 
this is equivalent to [a*/ 71 "] = +1, proving 4. □ 



Proof of Prop. 14- In the case T^\p) we have A = p and B — I, so (— 4/p)g = 1 
from 1., (p/l) 4 (l/p)4 = [tt/X] = 1 from 2., (— 4/p) 8 = (l/p) 4 from 3. and no 
condition from 4. In this way we find all criteria given in Table || except those 
involving [n/A]. These have to be derived in an ad hoc manner: 

• T^)(2) : 2n 2 = M 4 + p 2 l 2 e 4 . Write the torsor in the form -p 2 l 2 e A = (M 2 + 
n\[2)(M 2 — n\[2). We assume that (M,pl) — 1; the other cases are treated 
similarly. Then M 2 + n-</2 = nil 2 A 2 a 4 for primes II, A e Z[y/2] such that Nil = p, 
NA = I and II = A = 1 mod 2. Moreover, r\ = e ±:L with e = 1 + V%. Adding 
the last equation to its conjugate gives 2M 2 = (V2M) 2 = r/II 2 A 2 Q; 4 + 77TI A a 4 . 
Replacing M by Me if necessary we may assume without loss of generality that 
i] = e. Thus 

e-\V2M) 2 = n 2 A 2 a 4 - e 2 LT 2 AV = (nAa 2 + eLIAa 2 )(nAa 2 - eLIAa 2 ). 

Now nAa 2 + eTlAa 2 = y/2 mod 2, hence IIAa 2 +eTlAa 2 = \/2^ 2 , nAa 2 - ellAa 2 = 
V^e^ 1 ]! 2 . Reducing modulo IT and using [n/TT] = (2/p) 4 , [e/TT] = (— 4/p) 8 = 1 (in 
this case), as well as [A/II] = [A/II] we find that the solvability of T^(2) implies 

[A/n] = 1. 

• T^(2p); Factoring 2pn 2 = M 4 + l 2 e 4 as 2pn 2 = (M 2 + le 2 + MeV2l ){M 2 + le 2 - 
Mey2l ) and observing that Me = 1 mod 2 implies that each factor is divisible 
exactly once by the prime ideal 2 above 2. Thus zpn 2 — (M 2 + le 2 + MeV2l), 
where n is an ideal with norm n. Let h + denote the class number of Q(\/2l) in the 
strict sense. We have to distinguish several cases: 

(1) h = 2 mod 4, h + = 4 mod 8. By Proposition 0, this holds if and only if 
(— 4//) 8 = —1, and we also know that NE21 = +1 and that 2 is principal 



in the wide sense. Now [11/ A] = +1 p~ 4 by Lemma |^, and since 

2pn 2 is principal in the strict sense, this happens if and only if 2n 2 ~ [~4~| . 
If (2/1)4 = — 1) then 2 ~ 1 is principal in the strict sense, and this happens 
if and only if n 2 ~ |~4~| , thus by genus theory (2/«) = (l/n) = +1. 

But (2/n) = (2p/l) i = ~(p/l)i. Finally, solvability of T^(2p) implies 
(-4//) 8 = (p/lU(l/p)4, so (p/l) 4 = {-4/l)g(l/p) 4 = -(l/p) 4 , and we see 
that [n/A] = (l/p)4 as claimed. If (2/l)± = +1, on the other hand, then 2 
is not principal in the strict sense, hence [II/ A] = +1 <^=> n 2 i [T], that 
is, iff —1 = (2/n) = (p/l)i, and as above this gives [n/A] = (l/p) 4 . 
(2) h = h + = 4 mod 8. By Proposition [| this holds if and only if (2/l) 4 = -1 
and I = 9 mod 16. Here 2 2 is principal in the strict sense and 2 is not, 



in particular 2 ~ |~2~ but 2 & |~4~|, Now [n/A] = +1 ^=> n & 



which in turn happens iff —1 = (2/n) = (2p/l) 4 = —(p/l) 4 . Since 1 = 
(— 4/Z)§ — (p/l) 4 (l/p) 4 from earlier solvability results, this gives [n/A] = 1 
(l/p)i = 1 as claimed. 
(3) h + = mod 8. By Proposition^, this holds if and only if (2/l)± = +1 and 
I = 1 mod 16. Here 2 2 = (2) is principal, and since the class group C1^"(A;) is 
cyclic, 2 ~ |T|. Thus [n/A] = +1 <S=^ n ~ [2] <S=^ 1 = (2p/l) 4 = (p/l) 4 , 



and we conclude as above that [n/A] = (l/p) 



4- 
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• TW(2l) : N 2 = 21M 4 + 2p 2 le 4 . Symmetry reduces this to the discussion of 
T^)(2p). 

• T^(2pl) : N 2 = 2plM A + 2ple A . We start by factoring the torsor as 2pln 2 = M 4 + 
e 4 = (M 2 + e 2 + MeV2)(M 2 + e 2 - MeV2). Unique Factorization in Z[y/2] gives 
M 2 + e 2 + Mey/2 = eV^ILV 2 and M 2 + e 2 - Mey/2 = -~e\/2UAV 2 . Subtracting 
the second equation from the first gives 2Me = ellA^ 2 + eHAV 2 , which in view of 
[e/TT] = (-4/p) 8 and [n/TT] = (2/p) 4 gives [A/II] = (Me/p)(-l/p) s . 

On the other hand we have 2pln 2 — (M 2 + ie 2 )(M 2 — ie 2 ), hence M 2 + ie 2 — 
{l + i)ir\v 2 for some v € Z[i]. This implies (Me/p) = [Me/n] = [-i/irji = {-l/p)&, 
hence our claim that [11/ A] = 1 is proved. □ 

The use of genus theory in this connection was suggested by the proofs of Pepin's 
conjectures in Q. This concludes our discussion of the <?i-part of IH(J3/Q). 

5. The Main Result 
The main result of this note is the following theorem: 

Theorem 16. Let p = I = 1 mod 8 be primes with (p/l) = 1. The proper- 
ties of the Tate-Shafarevich groups UI(Ek/Q)[4>] and lll(Ek/Q)['il'] correspond- 
ing to the 2-isogenies between the elliptic curves Ek ■ y 2 — x(x 2 — p 2 l 2 ) and 
Ek : y 2 = x(x 2 + Ap 2 l 2 ) are recorded in Table If the rank given there is 0, 
then the given subgroups actually equal III(£ , / ! C /(Q))[</>] and ni(_Efc/Q)[-0], and we 
have m(E/Q)[2] ~ (Z/2Z) 4 . 

The last two columns in Table || give the smallest examples of p and I satisfying 
the conditions and such that the given inequality for the rank is an equality (as- 
suming the BSD-conjecture, and with the possible exception of the first line with 
p = 41, I = 2273, where the rank is 2 or 4). In all cases except one, the given 
example is the one that occurs first: the exception is pi = 41 • 1601, where the 
example pi — 41 • 1321 has the same residue symbols; yet rank -E41.1321 = 0. 

Let us sketch the proof by going through one example. Take e.g. the second 
line; we claim that T^\p) is the only possibly trivial torsor in S^(E/Q) (that 
means that it is the only one that might have a rational point). In fact, the torsors 
rW(2), TW(Z), TW(2l) and T^\pl) are nontrivial since (-4/Z)s = -1, whereas 
T^(2p) and T^(2pl) are nontrivial because (p/l) A (l/p) 4 ^ (-4/Z)s- The other 
claims now follow immediately. 

It remains to prove that III(£J/Q)[2] has order 16 if rankE'p; — 0. Recall the 
exact sequence 

— m(£/Q)[<fl — > IH(£/Q)[2] — m(E/QM -^C^Q, 

where C is a finite 2-group of even rank by a result of Cassels. Since C is a 
quotient of the group UI(E /Q)[i/j] of order 2 in our case, we must have (7 = 0, and 
in particular we get UI(E/Q)[2] ~ TIt(E/Q)[4>] 1H(E/Q)[ip] as claimed. 

The formula in p. 30] shows that, assuming BSD, the order of UI(E/Q)[2] is 
4 in these cases; this will be proved unconditionally in a subsequent paper dealing 
with a comparison of the method used here and classical 2-descent. 

Corollary 17. The curves of rank among E p i , where p = I = 1 mod 8 are primes 
such that (p/l) = +1, have density at least h. Those with rank 4 have density at 
most ^ . 
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(20 


17 


137 








-l 


-1 


(p) 


(2,P,0 





1 


89 


97 




-1 


+ 1 


+1 


+ 1 


(p) 


(2,p,i) 





1 


41 


337 








+1 


-1 


1 


(2,0 


< 2 


(2p> 


113 


401 








-l 


+ 1 


(p) 


(2,P,0 





1 


17 


257 








-l 


-1 


(p> 


(2,P,0 





1 


73 


97 






-1 


+1 


+ 1 


(p> 


(P> 


< 2 


(2p,2l) 


113 


257 








+1 


-1 


(p) 


(2,P,0 





1 


41 


241 








-l 


+ 1 


(p) 


(2,P,0 





1 


89 


257 








-l 


-1 


(p) 


(2,P,0 





1 


17 


281 



Table 3. The Tate-Shafarevich groups TU[<p] := IH(E k /(Q){(f>} 
and III [ip] := JH(Ek/Q)[ip] corresponding to the 2-isogenies be- 
tween the elliptic curves Ek ■ y 2 = x(x 2 — k 2 ) and Ef. : y 2 = 
x(x 2 + 4k 2 ) with k = pi have subgroups as indicated. The column 
labeled by rk E gives bounds for the rank of Ek(Q). The column 
WW gives the subgroup of torsors in S^(E/Q) that may have 
rational points. 



In [|37|, Wada and Taira (extending previous calculations of 
see also Nemenzo 



Some Examples 

Noda & Wada §?[ 

for k < 40, 000. For 20 of these curves, they could only prove that the rank was 



24 ) computed the rank of most curves Ek 
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between 2 and 4. For 8 out of these 20 numbers, our results show that the rank is 
in fact 2 in these cases: 



k 


P 


I 


(1/P)4 


(P/1)4 


("4/p) 8 


(-4/0s 


[n/A] 


1513 


17 


89 


+ 1 


-1 


-1 


-1 


+i 


2329 


17 


137 


+ 1 


-1 


-1 


+1 


-l 


4633 


41 


113 


+ 1 


-1 


+1 


+1 


+i 


6001 


17 


353 


+ 1 


+ 1 


-1 


+1 


-l 


6953 


17 


409 


+ 1 


+ 1 


-1 


+1 


-l 


7361 


17 


433 


-1 


+ 1 


-1 


-1 


+i 


7769 


17 


457 


-1 


+ 1 


-1 


+1 


+i 


9809 


17 


577 


+ 1 


-1 


-1 


+1 


-l 



We remark in passing that the inequality rank E < 2 in these cases follows 
already from the criteria not involving [11/ A]. Moreover, the special case k = 1513 
was discussed by Wada Q . 

The tables of Nemenzo |2(| contain 70 more values k = pi < 100,000 such 
that Ek has analytic rank 2 and Selmer rank 4. For 66 of them, the criteria 
involving the rational residue symbols suffice to show that the rank is at most 2; 
the 4 exceptions are k = 64297 = 113 • 569, 67009 = 113 • 593, 93193 = 41 • 2273 
and 94177 = 41 • 2297. For these values of k we find [A/IT] = -1 except when 
k = 93193. 

In |2l[] , we will treat the remaining values of k from JItJ for which the rank could 
not be determined there. 
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